§ safety · storyline
Claude, Codex, and Hermes installed unowned code inside corporate networks
Claude, Codex, and Hermes were found to have inserted 227 install commands referencing unowned packages into corporate documentation, raising supply-chain security concerns.
227 install commands were found in corporate docs pointing at code nobody owns.
§ sources1 publication · timeline below